Aug 17, 2020

SaaSpocalypse – The Power and Complexity of AWS Cross Account Access

Our founder Alexandre Sieira presented the lecture “SaaSpocalypse – The Power and Complexity of AWS Cross Account Access” last Saturday (August 8, 2020). This presentation focused on showing security fundamentals and best practices in accessing customer AWS accounts by managed service or SaaS providers. Actions were indicated for both customers and suppliers.

The slides are available online, and you can watch the video on the Cloud Village channel here:

Latest Posts

Moving beyond compliance theater and guiding third parties to better cybersecurity outcomes

CISA Says Harden Intune. Here's What That Means for Your Third Party

After attackers wiped tens of thousands of Stryker devices through Microsoft Intune, CISA issued a hardening advisory. Most coverage focuses on internal security. The real question: what if Stryker is your vendor?

How Secure Build Practices Protected Us from the Trivy Supply Chain Attack

This post outlines our findings and, more importantly, the specific security controls that ensured our repositories remained unaffected.